Privacy Policy

Last updated: March 18, 2026

Overview

Sandman is a sleep detection app that pauses media playback when you fall asleep. We are committed to protecting your privacy and being transparent about the data we handle.

Data we collect

Sandman collects the following data from your Garmin watch to perform sleep detection:

Heart rate
Resting heart rate
Stress level
Body battery
Step count
Move bar status

How data is processed

All sleep analysis is performed locally on your Android phone. Sensor data is transmitted directly from your Garmin watch to your phone over Bluetooth using the Garmin Connect IQ protocol. No sensor data passes through our servers for the purpose of sleep detection.

Data sent to our servers

If you sign in with a Google account, the following is sent to our servers:

Google account email — for authentication and account identification.
Sleep/wake events — timestamp, device ID, and detection confidence score. Used to improve detection accuracy over time.
Aggregated sensor snapshots — periodic summaries of the sensor readings listed above. Used for algorithm improvement and personalization.

You can use Sandman without signing in. In that case, no data is sent to our servers and all processing happens entirely on your phone.

Data storage

Server-side data is stored in AWS infrastructure in the US East (N. Virginia) region. Data is retained for up to 90 days and then automatically deleted.

Third-party services

Google Sign-In — used for authentication. Subject to Google's Privacy Policy.
Garmin Connect IQ — used for watch-to-phone communication. Subject to Garmin's Privacy Policy.

Permissions

Sandman requires the following Android permissions:

Notification Listener — required to detect and control active media sessions.
Foreground Service — required to keep the sleep detection service running.
Internet — required to sync data with our servers (only when signed in).

Your rights

You can:

Use Sandman without an account (no data leaves your phone).
Sign out at any time to stop data syncing.
Request deletion of your server-side data by contacting us.

Children

Sandman is not directed at children under 13 and we do not knowingly collect data from children.

Changes

We may update this policy from time to time. Changes will be posted on this page with an updated date.

Contact

For questions about this privacy policy or to request data deletion, contact us at support@sandman.app.